So, I’m building an app that only has “Sign In with Google” in order in the name of the authenticated user to upload files to his google drive.

Now my question is, since It’s best for my backend to handle the authentication, is it a good approach to set the redirect URI on GCP to be the default URI with the host being the backend?
Then after obtaining the access token, saving it to a db, to generate a JWT token for the frontend, in order for the client app to know that the user has been authenticated successfully and send it on each request up until a refresh token is needed, and the backend part to handle the internal filtering upon the OAuth2, with JWT?

The stack that im building it is with React.js v.17 and SpringBoot 3.2.5, Java 17